What is CVE-2013-4860?

CVE-2013-4860 is a vulnerability in Radiothermostat Ct50, classified under CWE-264. Published 2014-06-05.

Is CVE-2013-4860 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Radiothermostat Ct50

CVE-2013-4860

Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other settings via unspecified vectors.

EPSS: 0.020 (78.2th percentile) — read the EPSS interpretation.

Affected products

Radiothermostat Ct50
Radiothermostat Ct50_firmware
Radiothermostat Ct80
Radiothermostat Ct80_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

brannondorsey/cve
brannondorsey/radio-thermostat

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_MISC)

Frequently asked questions

What is CVE-2013-4860?: CVE-2013-4860 is a vulnerability in Radiothermostat Ct50, classified under CWE-264. Published 2014-06-05.
Is CVE-2013-4860 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.